HNHacker News
TopNewBestAskShowJobs

aroch

3,561 karma · joined May 21, 2013

submissionscomments
aroch··on Mossberg: I just deleted half my iPhone apps
Google Fit and Now (and everyone's friend, nlpwakelock) are also frequent culprits
aroch··on A Medical Mystery of the Best Kind: Major Diseases Are in Decline
Yes/no... It has to be heritable beyond a single reproductive cycle. Which isn't the case with all epi markers.
aroch··on ViperDNS closed down
I would guess they have to get 'clean' IPs too. Simply moving the IP to a different server likely is not sufficient. Netflix also filters the common ASes, so you need to shuffle between exotic/new blocks

Even the TTL on a.dns.whatever is set to 1min, a lot of clients ignore the TTL and use the cached value for minutes to days after TTL expiration.

aroch··on Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
I mean, I know it's pronounced like engine-ex (just like it's Oh-Ess Ten, not Oh-Ess-Ex, or jif not gif), but when I'm just reading the word to myself it comes out n-jinks because fewer syllables.
aroch··on Apple could block iPhone camera at cinemas, concerts
I guess we're on a 4 year cycle?

"Apple awarded patent for geo-fencing profile changes to stop you texting in the theater"

https://www.engadget.com/2012/08/28/apple-geofence-profile-p...

aroch··on Mac CLI – OS X command line tools for developers
Already in use (though, pretty niche): http://micans.org/mcl/
aroch··on Defending Our Brand
Comodo is just cross-signing CF certs[1] because the CF Origin CA is not yet in browser trust stores. GlobalSign and Digicert also cross-sign CF certs.

[1] https://blog.cloudflare.com/universal-ssl-encryption-all-the...

aroch··on SPF, DMARC, and DKIM: How to Keep Your Email Out of the Spam Folder
I'd disagree, there are several packages that make it relatively beginner friendly (Mailinabox, sovereign) -- everyone has to learn some how. There are also lots of good tutorials, and one of the great pleasures of setting up a mailserver is once you've done it you can reuse the configs. It is a great learning experience for relative novices and "greybeards" alike.

You've just cut the number of people who can do it your way down to <1000 people (or may as well). No normal person, who wants to learn how to setup a mailserver and be successful at it, is going to drop ~$5k on a server or know people who run T1/T2 datacenters and are willing to pop you in a cage for free.

Your last sentences dismisses everyone who doesn't do things to your impossible standards as a waste.

You're basically saying no one should run a mailserver, or learn how, or be given the opportunity to learn how. Which is sad.

aroch··on SPF, DMARC, and DKIM: How to Keep Your Email Out of the Spam Folder
Most people aren't in your or my position, where we might know (sometimes personally) the management at an ISP. Most people aren't in a position to build their own server. Heck, the vast majority of people who want to host any thing aren't in that position. And who wants to spend $200+/m to on their personal email?

The number of colo providers who refuse to allow customers like VPS hosting companies (who buy rooms not just rent a piddly little 2U from a shared cabinet), is pretty small.

All in, your advice isn't tenable for the majority of technophiles, let alone your slightly-more-technical-than-average user who wants to setup a mailserver. The barrier to entry, your way, is insurmountable.

Maybe it's time for a startup in the "DIY mailserver" space, that offers clean IPs for personal use mailservers and hand-holds through the process?

aroch··on SPF, DMARC, and DKIM: How to Keep Your Email Out of the Spam Folder
>There's a pretty direct inverse correlation between the cost of a hosting service ($5/mo VPS vs. minimum $200/mo colocation of a 1U server) and how much outgoing abuse traffic has been sent from the particular netblock assigned to the enduser customers. Cheap hosting company = poor IP space reputation.

Eh...this is pretty much bullshit. Unless you're running your own, good-reputation AS (or happen to know someone running a clean AS who can either lend you an IP or announce a clean block for you), the /25|/29 assigned to you by your colo provider has just as good a chance as being dirty as that VPS providers.

Your colo provider is also more than likely happily delegating blocks to one of those cheap VPS providers out of the same larger netblock your IP. Chances are even good that you'll be given a /26 or a /29 that used to be used by one of the VPS providers.

If you see a provider offering "up to 256 clean IPs!!!", those aren't clean IPs. Those are, at best, greylisted IPs bought on the cheap and at worst /22's rented from poor rep /16's and rebadged in the hope no one will notice

aroch··on SPF, DMARC, and DKIM: How to Keep Your Email Out of the Spam Folder
IIRC ~all is the recommendation because hotmail/live told people to use ~all to prevent hardfails when hotmail's lookups timed out or if a particular mailserver IP was inaccessible during spam checks.

~all will result in your email being bounced around until accepted even if the IP doesn't match DNS records (more or less).

-all will result in hardfail if rejected by any TO mailserver.

aroch··on Project Sunroof
It looks pretty much like what it looked like back in 2015?

https://web.archive.org/web/20150818043020/https://www.googl...

https://news.ycombinator.com/item?id=10073724

aroch··on Network Performance Issues in Europe
Seems to be a backbone / fiber issue. Leaseweb also experienced quite a large drop in connectivity and transatlantic latency went through the roof[1]

[1] http://leasewebnoc.com/en/networkstatus/latency-and-packet-l...

aroch··on GNU Screen v.4.4.0
I think mouse support in Tmux is significantly better; it is hidden behind config flags but tmux supports window and screen switching, buffer scrolling (mouse wheel support), copy-on-select, plus you can bind mouse keys as part of functions.
aroch··on Why aren't PGP and SSH keys popular as a second factor for authentication?
There was definitely a time, maybe a few years ago in the 2013-2014 range, when opening a new Gmail account required a phone number to activate[1]. The rule wasn't applied to every one, it was based on some heuristic or another.

Though, amusingly enough, you could use a Google Voice number and there was no limit to the number of accounts one number could activate (at least not that I noticed).

1 http://timesofindia.indiatimes.com/tech/tech-news/Google-Yah...

aroch··on Home Depot Files Antitrust Lawsuit Against Visa, MasterCard
While a service that doesn't allow chargebacks is very, very merchant friendly, it is super not consumer friendly.

Chargebacks are frequently last resorts for dealing with unscrupulous businesses or places that just don't give a shit once they've sold you what they want to sell you.

That said, chargebacks can also be used vindictively and/or fraudulently. And Visa/MC/etc could do a better job in dispute handling.

aroch··on Linode’s 13th Birthday
Contemporary PCI compliance does not require dedicated hardware -- You can by PCI Level I compliant on DO, AWS and many other shared-infra providers.

Also, worth noting, since most places are integrating payments through, e.g., Stripe, the requirements on the gateway server are much lower.

aroch··on ZFS: Apple’s New Filesystem That Wasn’t
LSI cards can be run in both RAID mode and passthrough / standard SAS/SATA controller mode for XFS/ZFS/btrfs -- which works wonderfully most of the time and cuts down on hw heterogeneity. You will have to use some disk controller or another, your motherboard is not going to have 12/24/36/48/80 SATA ports
aroch··on ZFS: Apple’s New Filesystem That Wasn’t
Adding a ZIL device is equivalent to over-provisioning, but with performance impacts in high performance situations
aroch··on ZFS: Apple’s New Filesystem That Wasn’t
We always over-provision any way, but with ZFS the overage is a requirement for any reasonable performance. With XFS, you can get away with 90-95% full; yes, there's degraded performance but nothing like the 10 IOPS you get from ZFS.

Don't get me wrong I like ZFS/btrfs; I adore snapshot send/receive. It at times though really handicaps itself.

aroch··on [video] Introducing Apple File System
I believe Safari's HLS implementation is incompatible with Chromes. You can load the stream in VLC though: http://devstreaming.apple.com/videos/wwdc/2016/701q0pnn0ietc...
aroch··on ZFS: Apple’s New Filesystem That Wasn’t
ZFS pool IO performance drops like a rock off a very tall cliff once the pool is in the 80%+ full range. So for every TB of usable pool space, you need to over-provision by 200-300GB. This is with current gene enterprise SSDs mind you. Even worse things happen when using spinning rust -- like ZFS dropping drives from the pool because IO has degraded so much it thinks theres a bad drive.

It turns out that some raid controllers (Including the very popular LSI variety) + certain kernel versions result in pools and drives being dropped from the array for no discernible reason. Nothing [useful] to logs, just reboot and pray

Non-ECC RAM is just asking for trouble in any circumstance where you care about both data integrity and IOPS. Bitflips can and will get you, now they won't wind up hosing your entire pool (most likely) like some apocryphal stories suggest. But, you'll get bad data replicated and the possibility of borking some other sector during the 'recovery' process from the bitflip.

When you're in a large enough pool (PB-scale) this becomes even more painful...

aroch··on Investigating Cavium's ThunderX: ARM Server SoC
Correct me if I'm wrong, but these seem to be TDP/speed/heat limited because they're based on a modified, older 28nm process design?

Process shrink requires a lot of resources and R&D spending, but surely they could have benefited from not using 2008 ARM cores in 2016?

aroch··on Costs of Sprawl: The Speed Burden (2014)
I wager that Kidman Beef Co probably wins this particular distinction. Their grazing lands are in the ~30-35K square mile range -- or the size of Ireland!
aroch··on Second layer of information in DNA confirmed
WildUtah is referring to chemical modifications (methylation, associated with epigenetics: http://www.whatisepigenetics.com/dna-methylation/), the structure of [eukaryotic] genes (intron/exon, start and stop; things many elementary students know of -- and subsequently forget) and palindromic elements.

Palindromic elements are most closely related to what the linked paper is about. Basically, instead of existing as a normal double helix, the two strands separate and bind with the palindrome on the same strand; like making an X with DNA: https://en.wikipedia.org/wiki/Palindromic_sequence .

Ultimately, this is a crappy press release for a paper that, as _of points out, is scientifically correct but otherwise dull. The paper is going back to first principles, as it were, for DNA and looking at factors in DNA alone that contribute to its function (well, 'normal', non-methylated, potentially histone associated DNA).

aroch··on Second layer of information in DNA confirmed
Wait, what is this bullshit and what moron wrote this press release?

From the paper:

> Analysis of two high resolution nucleosome maps revealed

> strong signals that—even though they do not constitute a

> definite proof—are at least consistent with such a view.

Also, the premise of this paper is clearly something only a physicist would think was interesting. And I'm not the least bit surprised this wound up in PLoS.

This just in: Modeling DNA using what we already knew about DNA confirms what we already knew about DNA.

-----

Edit: OK, I've gone back and actually read the whole paper. I can't say I'm particularly swayed by this paper and I'm not entirely sure the point. But, in a pattern I'm seeing throughout biology, a non-biologist modeler just realized that bio is cool and spent the weekend modeling something. Overall, I'm not sure what this brings to the table that merits being published?

Here's my reading of the main points:

1. Some DNA sequences are bendier than others [Not a finding of the paper, already known]

2a. There are histone binding sites and "promoters" for nucleosome formation [already known]

2b. Through modeling, Eslami-Mossallam et al., claim a major factor in nucleosome binding is whether the DNA can (thermodynamically) easily bend around the histone complex. OK, fine, the models are maybe more specific but this preference (and the motifs that comprise the hotspots) were more or less known.

3. DNA sequence determines the physical and genetic properties... Yes, we know.

4. The degeneracy of the genetic code allows it to encode additional information. We already knew this, in fact, we know the mechanical properties of RNA encode functional roles (See, programmed ribosomal frameshifts and the DNApol gmaa/tau subunits)

5. [The real shocker] DNA in real life organisms encodes both genes and its own structure.

aroch··on Email Address Disclosures, Preliminary Report
If you're sending to/from Gmail/Exchange the limit is somewhere around 100 addresses (I believe it's technically the byte-size of the field not strictly the number of addresses).

The actual spec though, AFAIK, has no limit.

aroch··on Summary of the AWS Service Event in the Sydney Region
It doesn't sound like they were treating it as binary, they have breakers in place for brownout detection too -- those breakers just weren't triggered fast/early enough in the brown out.
aroch··on Inkdrop – Notebook app for Hackers
What's the point of having a checkbox next to the newsletter subscribe text if it isn't uncheckable?
aroch··on Ask HN: Alternatives to Team Viewer?
Most people don't have newiwsh desktop-class GPUs. Particularly in the enterprise environment most remote desktop programs are born out of
← PreviousPage 5 of 34Next →